OHDSI Home | Forums | Wiki | Github

Broadsea 3.0 - Limiting LDAP users in Atlas to specific group in LDAP server

Hello,
I set LDAP authentication for Atlas, and is working. My issue is that when I go to configurations and try to import LDAP users I can not find a way to only appear users from a specific group in LDAP, it always appears all the users in the server. I’ve tried to filter in the searchstring field, which gives no error but in the import it still appears all other users in the server (I tested string I’m using and is correct and gives correct output with ldapsearch), I’ve also tried to change LDAP_DN and SearchBase fields, but those give error when I try to log in after filtering them. Not sure what else I can try to be able to have only users from my desired group available in import option.
Hope someone can help.
Thank you,

The only way to limit Atlas/WebAPI from pulling up the entire LDAP is to set the SECURITY_LDAP_BASEDN, SECURITY_LDAP_SEARCHSTRING, and SECURITY_LDAP_SEARCHBASE variables.

I’d recommend using a tool like Apache Directory Studio to obtain the right values for these, as it’ll depend on your LDAP setup.

t